Can We do LDAP searching or editing?

Nate Klingenstein ndk at internet2.edu
Sat Jul 6 08:17:20 EDT 2013


In the context of that user attempting to login, yes.  The IdP binds to the LDAP directory as a privileged user and searches for information about the other user.  This is done with the LDAPv3 protocol.

You can spoof a user using IdP code(not the IdP itself) aacli if you're an admin.

If you're only trying to search for data about other users as a trusted user not in the context of identification of a user to an SP, just use an LDAP searching tool.  Keepin' it ecumenical:

http://www.bing.com/search?q=ldapsearch

On Jul 6, 2013, at 12:10 , Saurabh Tyagi wrote:

> Can i serach LDAP for other users(If am admin) using IDP?




More information about the users mailing list